{"vulnerability": "cve-2026-1491", "sightings": [{"uuid": "ea333326-cda7-4394-afda-1fb60fde3aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14919", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mrxgjgetfu2a", "content": "CVE-2026-14919 - shopmonitor.io\nThe ShopMonitor.io WordPress plugin allows attackers to redirect emails, including password reset emails, to an address they control. This can lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#shopmonitorio #unknown #CVE #infosec", "creation_timestamp": "2026-07-31T17:00:06.166796Z"}, {"uuid": "8da0b512-4ffe-4d3f-ab9b-02e8e63d1369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-14917", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mvmwo2xzak22", "content": "Kong's API gateway has a SAML single sign-on bypass (CVE-2026-14917). With assertion-signature checks turned off, it could accept a forged, unsigned login and impersonate any user, admins included.\n\nOnly affects gateways with that flag off.\n\nFix: patch and audit the config.", "creation_timestamp": "2026-09-16T10:30:31.897232Z"}]}